Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File:                     DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier:          4eUyVbdWeRpxNyWZ7rVG5j6Gi6JDvON40piXiBqPX1U=
Subject key identifier:   1D:EB:CF:99:3F:D7:95:D2:18:19:F0:57:8C:F8:0C:75:84:12:32:B8
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer:       /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial:       01A002143992D9A236D3C3F4EA4BB1B34990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number:          0732
Signing time:             Fri 14 Aug 2026 21:01:14 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:14 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:14 +0000
Files and hashes:         1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: S0bROCDvYP7CMOHcj9evnhWYfujReHlDgz3Q6tneIws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:39:92:d9:a2:36:d3:c3:f4:ea:4b:b1:b3:49:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
        Validity
            Not Before: Aug 14 21:01:14 2026 GMT
            Not After : Aug 15 21:01:14 2026 GMT
        Subject: CN=1debcf993fd795d21819f0578cf80c75841232b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:47:d9:bf:2f:f2:3f:75:8c:79:ca:75:bc:
                    d5:77:ed:08:6f:86:3a:15:c2:3b:23:cb:82:82:09:
                    06:fa:fc:9f:ba:c3:d4:6b:4d:e8:8b:f5:a6:fa:3f:
                    4f:f0:1b:39:cd:19:dd:50:d0:d8:79:09:af:9b:29:
                    af:b8:e5:ed:68:4a:94:c3:06:3c:43:07:7a:3f:b0:
                    df:76:c8:71:e5:5b:72:32:04:22:7a:8c:2c:95:1e:
                    b6:47:a5:01:b0:d0:f1:84:25:f7:11:a1:32:6b:c4:
                    ff:2c:44:c1:86:71:a0:96:b1:b1:9c:cf:86:ff:2f:
                    bd:45:38:fa:8f:2a:83:42:f0:d9:91:c6:02:a9:b0:
                    4c:77:ce:02:11:b5:95:ff:bf:38:26:65:ca:8d:9a:
                    e6:21:b8:f3:6a:13:78:7c:29:62:c0:31:a7:87:16:
                    3b:b7:48:96:8c:08:63:c2:5a:da:c5:06:ba:6e:74:
                    80:00:27:12:4e:fa:68:0a:44:b2:12:b2:aa:04:04:
                    86:26:bf:1f:e5:70:9a:64:05:f9:d6:98:ae:e6:1b:
                    f4:a3:ea:fe:d2:eb:53:e7:0b:75:14:ce:1e:1d:d8:
                    7f:f2:0b:60:07:4d:87:0d:19:e2:34:b1:0c:7d:42:
                    a4:f6:5a:0f:56:7b:a7:34:c7:33:03:10:c3:3a:a7:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:CF:99:3F:D7:95:D2:18:19:F0:57:8C:F8:0C:75:84:12:32:B8
            X509v3 Authority Key Identifier:
                keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:f7:65:3c:e7:c1:35:93:d1:bb:64:8c:2f:a5:40:1d:21:
         79:d0:6c:32:1f:42:9f:2d:b9:9a:a6:ea:87:1f:4b:0f:8c:23:
         3a:e6:7c:54:46:93:4d:5e:a3:04:d5:63:01:14:0f:95:5c:03:
         18:70:2b:48:e5:13:8d:d0:ed:0c:5a:0a:84:a5:c2:c4:15:f8:
         f9:93:4f:99:3a:7a:d0:74:cd:bc:c7:1f:ca:a6:e1:b9:d6:80:
         61:93:8c:62:41:f5:22:92:79:88:c9:0b:1f:67:7d:f8:6b:a5:
         f3:ed:4b:42:15:41:8b:58:84:4f:33:aa:5f:d7:65:7b:9e:fc:
         39:a0:6e:36:1f:24:76:d8:cd:87:5d:bb:02:3f:39:be:70:28:
         a8:7f:1f:66:15:13:ca:85:c6:1f:92:1d:ab:2a:d3:23:5d:84:
         bd:43:4d:4d:a2:17:77:9a:11:dc:ff:54:29:4e:71:42:b9:ec:
         fd:5f:4d:de:07:7e:52:7e:c9:8a:2b:1b:78:47:17:8f:9c:ad:
         70:e4:1a:c1:65:3c:14:fc:00:97:ca:70:9b:16:52:4c:d4:97:
         f4:c0:2b:92:4f:3d:d6:1a:43:49:89:50:f4:c7:a7:c9:9d:8c:
         6c:ce:2c:cf:9c:9c:d6:73:6d:53:96:27:cc:28:f7:da:93:63:
         74:a8:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----